Invalid ID token error

Hi,

We just upgraded to the latest version of the plugin and now cannot log in.

There was a problem with your log in: Invalid ID token [error code: invalid_id_token]

error is being thrown in WP_auth0_loginManager.php but there don’t seem to be any useful error traces to track down why:

 } catch ( WP_Auth0_InvalidIdTokenException $e ) {
                        $code            = 'invalid_id_token';
                        $display_message = __('Invalid ID token', 'wp-auth0' );
                        WP_Auth0_ErrorLog::insert_error(
                                __METHOD__ . ' L:' . __LINE__,
                                new WP_Error( $code, $display_message . ': ' . $e->getMessage() )
                        );

500 error is thrown but nothing in PHP, Apache or wordpress logs.

Full error object output:

WP_Auth0_InvalidIdTokenException Object
(
    [message:protected] => Issuer (iss) claim must be a string present in the ID token
    [string:Exception:private] => 
    [code:protected] => 0
    [file:protected] => /var/www/html/wp-content/plugins/auth0/lib/token-verifier/WP_Auth0_IdTokenVerifier.php
    [line:protected] => 100
    [trace:Exception:private] => Array
        (
            [0] => Array
                (
                    [file] => /var/www/html/wp-content/plugins/auth0/lib/WP_Auth0_LoginManager.php
                    [line] => 596
                    [function] => verify
                    [class] => WP_Auth0_IdTokenVerifier
                    [type] => ->
                )

            [1] => Array
                (
                    [file] => /var/www/html/wp-content/plugins/auth0/lib/WP_Auth0_LoginManager.php
                    [line] => 188
                    [function] => decode_id_token
                    [class] => WP_Auth0_LoginManager
                    [type] => ->
                )

            [2] => Array
                (
                    [file] => /var/www/html/wp-content/plugins/auth0/lib/WP_Auth0_LoginManager.php
                    [line] => 139
                    [function] => redirect_login
                    [class] => WP_Auth0_LoginManager
                    [type] => ->
                )

            [3] => Array
                (
                    [file] => /var/www/html/wp-content/plugins/auth0/WP_Auth0.php
                    [line] => 635
                    [function] => init_auth0
                    [class] => WP_Auth0_LoginManager
                    [type] => ->
                )

            [4] => Array
                (
                    [file] => /var/www/html/wp-includes/class-wp-hook.php
                    [line] => 292
                    [function] => wp_auth0_process_auth_callback
                )

            [5] => Array
                (
                    [file] => /var/www/html/wp-includes/class-wp-hook.php
                    [line] => 316
                    [function] => apply_filters
                    [class] => WP_Hook
                    [type] => ->
                )

            [6] => Array
                (
                    [file] => /var/www/html/wp-includes/plugin.php
                    [line] => 484
                    [function] => do_action
                    [class] => WP_Hook
                    [type] => ->
                )

            [7] => Array
                (
                    [file] => /var/www/html/wp-includes/template-loader.php
                    [line] => 13
                    [function] => do_action
                )

            [8] => Array
                (
                    [file] => /var/www/html/wp-blog-header.php
                    [line] => 19
                    [args] => Array
                        (
                            [0] => /var/www/html/wp-includes/template-loader.php
                        )

                    [function] => require_once
                )

            [9] => Array
                (
                    [file] => /var/www/html/index.php
                    [line] => 17
                    [args] => Array
                        (
                            [0] => /var/www/html/wp-blog-header.php
                        )

                    [function] => require
                )

        )

    [previous:Exception:private] => 
)

We’ve seen one other issue like this: https://www.ads-software.com/support/topic/auth0-4-0-breaks-login-invalid-id-token/ but just copied the secret in and it was working before yesterday

Any pointers to resolve?

Thanks
Rob

The page I need help with: [log in to see the link]